Summary
It was discovered that Poppler incorrectly handled certain files.
If a user or automated system were tricked into opening a
crafted PDF file, an attacker could cause a denial of service.
(CVE-2017-14518, CVE-2017-14520, CVE-2017-14617, CVE-2017-14929,
CVE-2017-14975, CVE-2017-14977)
It was discovered that Poppler incorrectly handled certain files.
If a user or automated system were tricked into opening a crafted
PDF file, an attacker could cause a denial of service. This issue
only affected Ubuntu 17.04 and 16.04. (CVE-2017-14926, CVE-2017-14928)
Alberto Garcia, Francisco Oca and Suleman Ali discovered that Poppler
incorrectly handled certain files. If a user or automated system were
tricked into opening a crafted PDF file, an attacker could cause a
denial of service. (CVE-2017-9776)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | poppler | 0.24.5-2ubuntu4.7 |
| Ubuntu · 16.04 LTS 16.04:LTS | poppler | 0.41.0-0ubuntu1.4 |
Vulnerabilities 9
-
Unscored —
In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a …
-
Unscored —
In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a pote…
-
Unscored —
In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potenti…
-
Unscored —
In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF …
-
Unscored —
In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a …
-
Unscored —
In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of G…
-
Unscored —
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability…
-
Unscored —
The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerabilit…
-
Unscored —
Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote a…
References
-
report
https://ubuntu.com/security/CVE-2017-9776
-
report
https://ubuntu.com/security/CVE-2017-14518
-
report
https://ubuntu.com/security/CVE-2017-14520
-
report
https://ubuntu.com/security/CVE-2017-14617
-
report
https://ubuntu.com/security/CVE-2017-14926
-
report
https://ubuntu.com/security/CVE-2017-14928
-
report
https://ubuntu.com/security/CVE-2017-14929
-
report
https://ubuntu.com/security/CVE-2017-14975
-
report
https://ubuntu.com/security/CVE-2017-14977